WorksheetsInfoSec Chapt 10 Planning for Contingencies
Total questions: 10
Worksheet time: 5mins
Which of the following contains the contact information of individuals that need to be notified in the event of an actual incident?
incident response policy
business process
alert roster
after-action review
Detecting a modification of system logs is an indicator that an actual incident has taken place.
True
False
Which term below describes the point in time, prior to a disruption or outage, to which mission / business process data can be recovered?
Maximum Tolerable Downtime (MTD)
Recovery Time Objective (RTO)
Recovery Point Objective (RPO)
Work Recovery Time (WRT)
What is the first phase of the CP process?
Business impact analysis
Incident response planning
Disaster recovery planning
Business continuity planning
Which of the following is NOT a major component of contingency planning?
Incident response plan
Disaster relief plan
Disaster recovery plan
Business continuity plan
Slow-onset disasters occur over time and gradually degrade an organization’s ability to withstand their effects.
True
False
Which of the following terms best describe a site with a fully configured computer facility, including all services, communications links, and physical plant operations?
hot site
warm site
mobile site
cold site
Which type of offsite backup service provides backups for transactional data only, typically in real time?
Electronic vaulting
Traditional data backups
Database shadowing
Remote journaling
Which of the following is NOT considered a responsibility of the CMPT?
verifying personnel status
activating the alert roster
plan maintenance schedule
coordinating with emergency services
There are several strategies that can be used to test contingency plans. Which of the following is the simplest kind of validation and involves distributing copies of the appropriate plans to all individuals who will be assigned roles during an actual incident?
full-interruption testing
simulation
structured walk-through
desk check
